Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS63264.roa
File:                     AS63264.roa (raw, json)
Hash identifier:          SCyBojpwa+zzV8QQuCi/2+0uLKx8KS5TxYWY+E36+kM=
Subject key identifier:   8F:C0:52:F3:B8:4C:EE:11:74:15:D9:41:9D:AC:13:CF:4C:12:66:24
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       42A45780E864EB134633DDC31F8BEB9BA11876D2
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS63264.roa
Signing time:             Tue 26 Dec 2023 16:30:19 +0000
ROA not before:           Tue 26 Dec 2023 16:25:19 +0000
ROA not after:            Tue 24 Dec 2024 16:30:19 +0000
asID:                     63264
IP address blocks:        104.234.112.0/24 maxlen: 24
                          104.234.236.0/24 maxlen: 24
                          104.234.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 13:07:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:a4:57:80:e8:64:eb:13:46:33:dd:c3:1f:8b:eb:9b:a1:18:76:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Dec 26 16:25:19 2023 GMT
            Not After : Dec 24 16:30:19 2024 GMT
        Subject: CN=8FC052F3B84CEE117415D9419DAC13CF4C126624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4e:7f:c0:b3:30:43:9d:b7:51:8f:cb:82:1f:
                    cd:6a:5b:6b:c5:4e:b3:26:b9:b6:74:b7:35:2e:ae:
                    06:a0:75:e0:01:e0:ad:c4:c7:57:6b:c4:f1:b7:3d:
                    bb:41:bb:b5:82:53:bb:99:9c:85:7a:f7:b1:86:fd:
                    f3:c6:4c:7a:21:84:15:ae:80:eb:ca:a8:1c:fb:02:
                    a0:41:91:08:07:01:c0:ac:9b:95:e4:08:eb:ff:bb:
                    d5:f2:34:87:23:43:83:44:6f:ad:d6:38:e6:8c:1f:
                    cb:93:85:7b:fe:b0:9a:8e:31:7b:2e:b2:2e:ce:85:
                    bd:12:c5:ae:02:b3:b8:52:8f:07:61:c3:bb:fd:88:
                    04:46:29:ab:fe:32:23:9a:03:95:ee:23:c7:b5:e6:
                    29:20:72:f5:a4:4c:8a:6a:0d:a9:0f:b5:2c:f1:38:
                    04:7a:6d:c6:f9:18:9d:9b:82:3e:7e:a5:f7:c8:7d:
                    ad:50:30:6f:8f:9b:32:7d:fe:a6:7d:8c:dd:0c:a7:
                    1e:7d:22:60:c8:27:5c:6b:b8:88:b9:41:a0:b6:a0:
                    b6:1e:7b:5b:1f:31:a8:d8:40:66:2c:20:20:fc:c7:
                    d3:8d:d8:0e:db:66:d1:c4:23:1f:b6:80:9a:1d:8d:
                    34:77:7f:02:2f:0c:48:20:7c:ec:23:0c:ae:05:b0:
                    43:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C0:52:F3:B8:4C:EE:11:74:15:D9:41:9D:AC:13:CF:4C:12:66:24
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS63264.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.112.0/24
                  104.234.236.0/24
                  104.234.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:c8:75:21:c7:07:d8:e0:32:a4:76:57:c1:15:ec:02:46:7b:
         9f:67:19:d8:ac:c3:73:73:2b:3c:b5:d9:46:49:d0:bb:24:72:
         3b:1f:85:f2:7e:6c:4d:3f:28:fe:5c:ad:90:7b:37:16:59:b5:
         82:6d:ca:84:85:d8:e0:bf:d4:c2:e5:b5:3c:b3:9c:de:50:2c:
         b5:49:cb:7d:06:8a:c4:d5:82:51:9e:72:1f:de:c7:39:c9:9f:
         62:bd:0e:b4:de:9a:38:29:bc:58:bb:fa:10:8e:4c:69:23:40:
         0f:5d:64:21:7f:e0:20:ab:64:56:34:3b:d9:55:54:ef:2b:d3:
         5b:69:69:79:e9:45:9e:8f:87:bc:00:5a:47:50:39:df:16:71:
         39:20:54:37:e3:0b:53:18:11:44:27:04:da:da:bd:f4:42:d5:
         a6:4d:8a:c4:e5:4b:8c:c3:20:07:b4:10:af:87:fb:0f:a5:cc:
         a0:4d:60:0f:88:b5:6b:4a:0c:75:e9:60:11:c2:97:58:16:cb:
         37:c0:73:29:02:96:fe:f3:16:ff:80:b4:e4:4b:da:0a:13:fe:
         2e:1b:5e:8a:b9:2c:91:58:4c:66:1e:62:df:6c:59:26:01:1b:
         11:c7:3f:ed:38:3b:44:da:ee:47:95:e8:02:dd:02:60:88:4f:
         3c:fe:be:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 13:12:27 2024 by rpki-client on console-ams.rpki-client.org